GCVE - cpe:2.3:a:kimai:kimai_2:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kimai:kimai_2:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Kimai (`6583110a-b827-5630-9aa6-4b250da143f7`)
Product	Kimai 2 (`09edac0d-63c7-58a4-a67b-40db8bec8166`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:docker/kimai/kimai2`	purl2cpe	2026-06-01 10:11:24.305483
`pkg:github/kevinpapst/kimai2`	purl2cpe	2026-06-01 10:11:24.305484
`pkg:rpm/opensuse/kimai2`	purl2cpe	2026-06-01 10:11:24.305486

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-4033`	vulnerable	2026-06-08 05:38:08.122933	Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2 MEDIUM (6.5) kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) Published: 2021-12-09T19:55:10.000Z Updated: 2024-08-03T17:16:03.733Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/e05be1f7-d00c-4cfd-9390-ccd9d1c737b7 https://github.com/kevinpapst/kimai2/commit/1da26e041df62c10bd8075d78f2db7854d3eee07	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3976`	vulnerable	2026-06-08 05:33:58.318728	Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2 MEDIUM (4.3) kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) Published: 2021-11-19T10:35:10.000Z Updated: 2024-08-03T17:09:09.628Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/0567048a-118c-42ec-9f94-b55533017406 https://github.com/kevinpapst/kimai2/commit/b28e9c120c87222e21a238f1b03a609d6a5d506e	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3963`	vulnerable	2026-06-08 05:33:58.117956	Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2 MEDIUM (4.3) kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) Published: 2021-11-19T11:50:10.000Z Updated: 2024-08-03T17:09:09.612Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/3abf308b-7dbd-4864-b1a9-5c45b876def8 https://github.com/kevinpapst/kimai2/commit/95796ab2560ad93f44068a88f0fad758c2053514	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3957`	vulnerable	2026-06-08 05:33:58.112361	Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2 MEDIUM (4.6) kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) Published: 2021-11-19T12:00:11.000Z Updated: 2024-08-03T17:09:09.758Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/5fa3098a-ba02-45e0-af56-645e34dbc691 https://github.com/kevinpapst/kimai2/commit/6b49535b523dcd36ec59462ee4e67e2b3a9151f3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15481`	vulnerable	2026-06-08 05:12:57.470966	Details available Kimai v2 before 1.1 has XSS via a timesheet description. Published: 2019-08-23T12:25:49.000Z Updated: 2024-08-05T00:49:13.584Z Open on db.gcve.eu Reference links https://github.com/kevinpapst/kimai2/releases/tag/1.1 https://github.com/kevinpapst/kimai2/pull/962	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.